Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ea579-8e63-3ef7-adc7-b3ffb65dd4ba.roa
File:                     3e4ea579-8e63-3ef7-adc7-b3ffb65dd4ba.roa (raw, json)
Hash identifier:          zFBWXUNu19Sy6nP9G3zoo2F59PAQYpULt0BUbl2p0dY=
Subject key identifier:   32:4C:A9:42:F5:22:B9:2A:08:A0:29:93:93:7C:F8:87:55:C5:F5:F9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A02CAF26486BFDD44FB7D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ea579-8e63-3ef7-adc7-b3ffb65dd4ba.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:02:ca:f2:64:86:bf:dd:44:fb:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7536f8b4-7fcd-4ed6-8450-7276d9946d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:12:34:eb:68:62:2f:b0:f8:20:98:9b:cb:1d:
                    46:5b:33:e5:30:fb:7e:3c:eb:85:a9:f8:81:44:40:
                    49:de:7c:b5:e0:56:dd:e0:b1:18:87:68:20:9c:9b:
                    12:4c:60:74:c7:c3:4c:4e:d7:ac:99:22:99:2c:98:
                    74:17:17:52:a5:62:76:89:0c:6c:6b:34:74:f2:87:
                    27:ba:d3:0e:37:1c:ba:5c:14:da:b4:15:5d:03:18:
                    80:ad:51:57:b7:15:e7:d0:97:b0:49:b5:94:80:6f:
                    80:b4:a4:fb:65:1c:f7:f8:f4:84:87:d3:50:f8:49:
                    06:00:eb:53:53:3f:28:d9:fe:38:ae:4b:1b:5a:3d:
                    0d:f0:a3:16:9e:f0:c5:73:30:af:d5:31:1f:dd:44:
                    7f:b1:cc:1b:4c:f7:83:7a:b8:63:df:2c:a7:36:8c:
                    41:a4:49:27:0c:70:2a:1a:ce:c9:31:56:42:15:c4:
                    53:75:85:00:00:f8:ff:60:83:a7:0f:20:d1:b4:2f:
                    61:79:4b:34:86:46:97:d3:a3:5c:40:1f:7e:8b:91:
                    c1:d8:c0:ed:7f:9f:a6:d8:a5:45:5e:96:b0:0f:c7:
                    a6:63:d8:fa:5c:78:12:4d:8c:c9:83:cd:f2:85:62:
                    84:4b:17:f1:7e:8c:b6:10:e5:f0:d2:ec:5c:bf:25:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4C:A9:42:F5:22:B9:2A:08:A0:29:93:93:7C:F8:87:55:C5:F5:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ea579-8e63-3ef7-adc7-b3ffb65dd4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:35:4c:eb:c1:27:2e:d0:c2:dc:16:f9:04:35:68:db:ef:
         79:b9:98:f5:0d:5a:bd:d1:61:f9:38:d8:ab:73:62:09:ef:e0:
         8c:3a:f9:7b:ca:7f:dd:52:15:8b:df:84:07:f3:47:de:01:71:
         09:51:73:18:1e:d7:1a:5d:b6:af:19:d8:bc:77:72:50:0f:06:
         4b:9e:6a:56:b3:a3:31:33:48:37:36:91:f4:9c:8d:40:b3:2b:
         2e:9a:d2:ed:00:e2:11:09:32:9f:c4:23:c5:ee:d1:74:4f:af:
         f7:bb:a4:ab:48:4e:45:72:37:55:c2:07:d4:8e:91:37:95:12:
         78:6f:a2:b0:57:44:98:41:dd:31:1d:00:c2:0b:b2:bf:ef:5c:
         ff:6b:02:1f:a1:e1:52:fb:b5:79:e9:ee:42:0a:45:02:61:f0:
         f5:64:65:57:7f:42:66:44:e1:8a:6e:8d:b0:d9:13:83:0d:86:
         84:72:8e:00:5e:65:86:d4:c7:2f:d5:02:33:ed:51:97:a5:07:
         33:e4:87:f6:40:15:8f:a5:25:cb:6b:c0:45:b7:3a:06:92:dc:
         78:aa:f7:2f:16:f6:dc:15:e2:25:32:09:3f:90:e6:9a:e6:f5:
         f1:be:f2:dc:8f:ef:5e:ed:ab:e9:d3:cb:57:0b:c6:d2:2f:5d:
         29:7c:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----